Cipher for Disk Encryption

1. A cipher system for encrypting plaintext into ciphertext in an encryption direction and for decrypting ciphertext into plaintext in a decryption direction generally opposite the encryption direction, the cipher system comprising: a cipher; a first diffuser that provides good diffusion in the decryption direction and not-good diffusion in the encryption direction; and a second diffuser that provides good diffusion in the encryption direction and not-good diffusion in the decryption direction, wherein good diffusion in a particular direction in a particular diffuser is defined so that a relatively small change to an input of the particular diffuser in the particular direction produces a relatively large change to an output of the particular diffuser in the particular direction, the relatively large change of the good diffusion being larger as compared with the relatively small change of the good diffusion, wherein not-good diffusion in a particular direction in a particular diffuser is defined so that a relatively large change to an input of the particular diffuser in the particular direction produces a relatively small change to an output of the particular diffuser in the particular direction, the relatively large change of the not-good diffusion being larger as compared with the relatively small change of the not-good diffusion, wherein the first diffuser is provided with input data that is based on plaintext xorred with a sector key when the cipher system operates in the encryption direction, the sector key is derived from a key that comprises a number of bits, the sector key employs a first portion of the number of bits, and the cipher employs a second portion of the number of bits, wherein the second diffuser receives first diffused data from the first diffuser and provides second diffused data to the cipher when the cipher system operates in the encryption direction, and wherein the cipher encrypts the second diffused data into ciphertext when the cipher system operates in the encryption direction.

2. The system of claim 1 , wherein the cipher comprises an Advanced Encryption Standard (AES) cipher.

3. The system of claim 1 , wherein at least one of the diffusers is provided as an independent layer on top of the cipher.

4. A computer implemented cipher method for encrypting plaintext into ciphertext in an encryption direction, the computer comprising a processor, the computer implemented cipher method comprising: providing input data to a first diffuser on the processor, wherein the first diffuser provides good diffusion in the decryption direction and not-good diffusion in the encryption direction, the decryption direction being generally opposite the encryption direction; providing first diffused data from the first diffuser to a second diffuser that provides relatively good diffusion in the encryption direction and not-good diffusion in the decryption direction; and encrypting an output of the second diffuser using a cipher, wherein good diffusion in a particular direction in a particular diffuser is defined so that a relatively small change to an input of the particular diffuser in the particular direction produces a relatively large change to an output of the particular diffuser in the particular direction, the relatively large change of the good diffusion being larger as compared with the relatively small change of the good diffusion, wherein not-good diffusion in a particular direction in a particular diffuser is defined so that a relatively large change to an input of the particular diffuser in the particular direction produces a relatively small change to an output of the particular diffuser in the particular direction wherein the cipher encrypts the second diffused data into ciphertext when the cipher system operates in the encryption direction.

5. The method of claim 4 , wherein the cipher comprises an Advanced Encryption Standard (AES) cipher.

6. The method of claim 4 , further comprising receiving the plaintext.

7. The method of claim 6 , further comprising xorring the plaintext and the sector key to generate the input data.

8. The method of claim 7 , wherein the sector key and the cipher are independently keyed.

9. The method of claim 7 , further comprising deriving the sector key from a key.